Global Centre Aplomb Poll 1.1 - vote.php?Madoa Remote File Inclusion

Global Centre Aplomb Poll 1.1 - vote.php?Madoa Remote File Inclusion source: https://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issu...

Global Centre Aplomb Poll 1.1 - index.php?Madoa Remote File Inclusion

Global Centre Aplomb Poll 1.1 - index.php?Madoa Remote File Inclusion source: https://www.securityfocus.com/bid/25138/info Aplomb Poll is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these...

CVE-2006-7135

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

CVE-2006-7136

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7136

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7136: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Poll Creator phpPC 1.04 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter to 1 poll.php, 2 pollkommentar.php, and 3 pollsm.php, different vectors and version than CVE-2005-1755...

CVE-2006-7135

CVE-2006-7135: Affects PHP Poll Creator (phpPC) 1.04; vulnerable component is lib/functions.inc.php. Remote PHP code execution possible via a URL in the relativer_pfad parameter. No explicit remediation or patch details are provided in the supplied documents. The connected sources do not reveal a...

CVE-2006-7135

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

CVE-2006-7135: Undefined Security Weakness

PHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator phpPC 1.04 allows remote attackers to execute arbitrary PHP code via a URL in the relativerpfad parameter, a different vector and version than CVE-2005-1755. NOTE: the provenance of this information is unknown; t...

Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile RCE. date: 30/07/06 diwou PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath cmd proxy: export...

Advanced Poll <= 2.0.5-dev Remote Code Execution Exploit

Exploit for unknown platform in category web applications ======================================================== Advanced Poll = 2.0.5-dev textfile RCE. date: 30/07/06 PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath c...

Advanced Poll &lt;= 2.0.5-dev Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile RCE. date: 30/07/06 diwou [email protected] PHCKSEC c 2001-2006. Hey, what a mad world! use strict; use warnings; use LWP::UserAgent; use MD5; args: http://url/apollpath cmd proxy: export...

CVE-2007-0845

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...

Authentication flaw

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...

CVE-2007-0845

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...

CVE-2007-0845

CVE-2007-0845 affects Advanced Poll 2.0.0–2.0.5-dev, where admin/index.php can allow remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting uid=1. This entry provides the vulnerability description and base CVSS 2.0 score (7....

Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass

The remote host is running Advanced Poll, a simple polling application written in PHP. The version of Advanced Poll installed on the remote host includes code to emulate PHP's 'registerglobals' functionality when that setting is disabled, which is true by default with recent versions of PHP. In...

CVE-2007-0845: Undefined Security Weakness

admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges by obtaining a valid session identifier and setting the uid parameter to 1...

ap205-gen.txt

!/usr/bin/perl -w Advanced Poll 2.0.0 = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 diwou PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use warnings; use LWP::UserAgent; use MD5; my...

Advanced Poll <= 2.0.5-dev Remote Admin Session Generator Exploit

Exploit for unknown platform in category web applications ================================================================= Advanced Poll = 2.0.5-dev textfile admin session gen. 0day! KEEP IT PRIVATE 0day! date: 30/07/06 PHCKSEC c 2001-2006. see templates for code execution ;. use strict; use...